Digital Affairs & DPO Senior Specialist

What you'll do

• Advise product, engineering, data, and business teams on privacy, AI, and cybersecurity; assess product and AI risks and review related documentation.
• Co-lead privacy governance, including RoPA, DPIAs/PIAs, data subject rights, third-party oversight, incident response, training, and metrics.
• Support regulatory readiness and digital policy positioning, and advise on AI and agentic finance initiatives.

What they ask for

• Deep hands-on knowledge of US privacy and data protection laws, with practical familiarity with international regulation, particularly GDPR.
• Strong understanding of AI, data, cybersecurity, privacy governance frameworks, and corporate risk management.
• 8+ years of post-qualification experience in privacy, data protection and/or technology law, with significant experience in digital products and/or fintech/financial services, or equivalent experience in-house or at top law firms/consultancies.
• Law degree (JD or equivalent) and active license in at least one US jurisdiction, or equivalent senior in-house/regulatory experience.

Nice to have

• Regulator or supervisory-authority interaction experience is strongly preferred; privacy certifications are a plus.
• Portuguese or Spanish; experience with agentic payments, open banking, or other new payment technology is a plus.

Tools

Jira, Confluence, Slack, Google Workspace

AI focus

Legal and regulatory guidance for AI/ML governance, model risk, automated decision-making, and AI and agentic finance features, including credit and servicing decisions, agent-initiated payments, and automated customer interactions.